Southern Illinois Dermatology experienced a cyberattack on November 28, 2025. The company identified unusual network activity and completed its forensic review on March 4, 2026, with notifications to affected individuals beginning April 2, 2026.
The breach affected 160,312 individuals. Exposed data includes names, addresses, dates of birth, Social Security numbers, phone numbers, email addresses, medical record numbers, and "person number." Some reports indicate that protected health information was also involved, with specific data varying by individual. Financial data exposure has not been confirmed.
While law firm investigations and class action discussions have been reported, explicit confirmation of a filed, certified class action lawsuit or Multi-District Litigation (MDL) is not available at this time. Further details may emerge as investigations continue, and additional notices may be issued.